Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/DkQEt78w4vWDPZWBJtYqJw6w4bSXP4zC8Kigd1pocHk5/1/3137372e38372e382e302f32342d3234203d3e20323632363137.roa
File: 3137372e38372e382e302f32342d3234203d3e20323632363137.roa (raw, json)
Hash identifier: 50uf0TSld0jxeuf7/n4y/wPsIVhIgKSsPjE6ieCEhPU=
Subject key identifier: 34:B0:E7:91:A1:45:EF:01:5E:46:66:1A:31:ED:A6:D2:8C:0B:A6:4A
Certificate issuer: /CN=00078D2B578982663EFE91FC4B5397C48403E2E4
Certificate serial: 0F9D3DE773DB0A84010A9EAE1700FA87C0517D0D
Authority key identifier: 00:07:8D:2B:57:89:82:66:3E:FE:91:FC:4B:53:97:C4:84:03:E2:E4
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/00078D2B578982663EFE91FC4B5397C48403E2E4.cer
Subject info access: rsync://rpki-repo.registro.br/repo/DkQEt78w4vWDPZWBJtYqJw6w4bSXP4zC8Kigd1pocHk5/1/3137372e38372e382e302f32342d3234203d3e20323632363137.roa
Signing time: Wed 05 Mar 2025 20:35:59 +0000
ROA not before: Wed 05 Mar 2025 20:30:59 +0000
ROA not after: Wed 04 Mar 2026 20:35:59 +0000
asID: 262617
IP address blocks: 177.87.8.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0f:9d:3d:e7:73:db:0a:84:01:0a:9e:ae:17:00:fa:87:c0:51:7d:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=00078D2B578982663EFE91FC4B5397C48403E2E4
Validity
Not Before: Mar 5 20:30:59 2025 GMT
Not After : Mar 4 20:35:59 2026 GMT
Subject: CN=34B0E791A145EF015E46661A31EDA6D28C0BA64A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:fb:a3:4b:4c:9d:ef:54:28:64:11:14:95:cc:
a4:39:31:c6:d5:76:0d:61:c2:9a:ca:31:a7:37:1f:
0a:f5:09:db:7c:26:84:dd:7c:61:1c:96:4d:ad:ae:
95:04:88:a5:b0:7b:5c:1b:1a:79:a3:2b:21:d8:78:
41:1d:12:6d:18:76:b0:52:e6:96:97:52:2b:6f:11:
e5:f6:84:2e:e5:0c:6f:c7:d2:b2:8e:95:17:5e:ed:
fb:5b:69:02:d5:ea:0b:ff:79:16:d2:3c:86:8b:15:
2b:f1:f7:51:90:10:1a:9e:5f:b1:c8:a5:ce:ef:4a:
72:de:54:fa:49:1b:90:0f:b3:ae:b3:af:0a:b0:70:
41:07:c7:d6:5c:47:0b:3d:96:ba:bd:0d:aa:54:b2:
cb:87:77:d5:d1:e8:97:fb:3f:93:64:30:02:c7:4e:
db:ea:85:a9:77:2d:46:74:ab:a7:e8:37:e9:eb:af:
7b:ba:d8:ab:01:3b:b8:4c:bc:a4:ce:5a:a2:78:39:
56:54:b4:27:65:be:5e:ec:83:50:2b:e3:51:05:4a:
e3:3a:b5:95:48:d0:37:44:9c:51:0d:f5:bd:4b:38:
bd:7b:5e:e6:62:e2:46:f7:51:07:fb:a8:11:bd:7e:
d8:99:36:e0:38:7c:33:a1:35:c8:d0:2d:27:eb:c1:
fa:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:B0:E7:91:A1:45:EF:01:5E:46:66:1A:31:ED:A6:D2:8C:0B:A6:4A
X509v3 Authority Key Identifier:
keyid:00:07:8D:2B:57:89:82:66:3E:FE:91:FC:4B:53:97:C4:84:03:E2:E4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/DkQEt78w4vWDPZWBJtYqJw6w4bSXP4zC8Kigd1pocHk5/1/00078D2B578982663EFE91FC4B5397C48403E2E4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/00078D2B578982663EFE91FC4B5397C48403E2E4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/DkQEt78w4vWDPZWBJtYqJw6w4bSXP4zC8Kigd1pocHk5/1/3137372e38372e382e302f32342d3234203d3e20323632363137.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
177.87.8.0/24
Signature Algorithm: sha256WithRSAEncryption
55:93:f3:3f:ee:9d:b0:5b:b4:be:1e:84:b1:1e:7a:c5:6c:6f:
3e:71:b2:ee:46:39:50:8a:b7:d5:1d:41:c7:48:b6:31:0c:a4:
7d:7e:be:42:76:4b:cc:e7:06:34:e8:0d:6b:52:cd:0e:8b:b5:
49:2c:3a:0e:60:55:34:ce:d2:7a:18:e4:12:8c:87:c9:7e:a4:
74:7f:b4:ae:27:e3:a3:c7:25:29:5a:9c:f5:fc:16:28:b0:9e:
25:18:dc:e4:07:fb:54:34:4e:f6:61:35:9e:ec:78:05:b8:91:
d2:e5:39:03:17:42:f0:8e:75:09:d5:b0:ac:b0:3e:58:86:04:
3d:3f:f2:f3:a1:53:ed:eb:ec:32:e3:84:3d:68:d9:23:87:68:
ff:d2:13:93:b3:e9:42:a6:a8:dd:a1:d4:54:a2:64:3c:61:6b:
7e:07:19:76:f4:40:ee:9e:58:1c:a5:c6:f6:7a:9f:a8:f8:7e:
29:b4:f6:58:e1:d7:76:bb:f6:26:8a:cb:f9:6d:7d:47:bb:cd:
a5:b0:d8:c7:e5:e3:c1:35:0b:68:5c:19:fa:0a:6c:64:2f:44:
69:5c:77:0d:92:a4:41:58:19:0f:3f:cb:b4:e1:45:b7:e5:5e:
7f:69:b4:8b:3b:52:62:23:d0:3b:3f:dd:b4:aa:07:31:80:70:
fe:74:3f:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 06:31:13 2025 by rpki-client